rapid-belgium-4304
11/16/2023, 7:21 AMdial tcp: lookup
error, as it does not seem to be indicative of the actual problem.
All my pulumi projects stopped working today with this error. Worked earlier in the day.
FWIW I did do a brew upgrade
* configuring Terraform AWS Provider: validating provider credentials: retrieving caller identity from STS: operation error STS: GetCallerIdentity, https response error StatusCode: 0, RequestID: , request send failed, Post "<https://sts.us-east-1.amazonaws.com/>": dial tcp: lookup <http://sts.us-east-1.amazonaws.com|sts.us-east-1.amazonaws.com> on 192.168.0.1:53: no such host
How do I debug this and understand the actually problem?
This works fine:
aws-vault exec {env} -- aws sts get-caller-identity
This fails, but had been working fine to date for months, no changes (other than updating outdated brew packages)
aws-vault exec {env} --no-session -- pulumi up --stack {stack}
stale-answer-34162
11/16/2023, 2:49 PMrapid-belgium-4304
11/16/2023, 4:33 PMaws-vault
is doing, generating new temporary credentials for AWS. Do you mean something else?stale-answer-34162
11/16/2023, 4:34 PMrapid-belgium-4304
11/16/2023, 4:36 PMaws sts get-caller-identity
indicate my credentials are working just fine. If you mean something else, then you should explain what you mean.stale-answer-34162
11/16/2023, 4:36 PMrapid-belgium-4304
11/16/2023, 4:40 PMaws-vault
v7.2.0 on Mac Sonoma 14.1.1. See above error.aws-vault
, can you guys please test with this? Modern infosec practices even Amazon's own recommendations prohibit AWS classic credentials.aws-vault
, there's something much more fragile with how it's acquiring AWS credentials. It's very easy to break. Some debugging on your part is in order.
Is the Go pulumi package more reliable than the Node packages?dial tcp: lookup sts.us-east-1.amazonaws.com on 192.168.0.1:53: no such host
gifted-gigabyte-53859
11/17/2023, 12:50 AMrapid-belgium-4304
11/17/2023, 1:24 AMi/o timeout
-- different error, but yes, if AWS CLI works then exactly what does Pulumi (or Terraform) require that acts differently then the AWS CLI.salmon-account-74572
11/17/2023, 8:57 PMrapid-belgium-4304
11/21/2023, 2:28 AMpreview
worked one time out of a dozen attempts, up
and yet to work again.pulumi
in a docker image.salmon-account-74572
11/27/2023, 4:39 PM